For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bill_Morency_10's avatar
Bill_Morency_10
Icon for Nimbostratus rankNimbostratus
Oct 16, 2007

Gathering SNAT Origin address Statistics

Hi,

I am trying to find a way to track SNAT usage by monitoring changes in traffic volumes on a per origin address basis. What I can't seem to find is a way to get origin address specific information via iControl

[mybigip] config  b snat  t_192_107_98_17_sn show
SNAT t_192_107_98_17_sn
|        ORIGIN: 100.253.173.12
|        (cur, max, limit, tot) = (This is the data I want)
|        (pkts,bits) in = (This is the data I want), out = (This is the data I want)
|        ORIGIN: 100.253.173.17
|        ORIGIN: 100.253.173.26
|        ORIGIN: 100.253.173.27
|        (cur, max, limit, tot) = (0, 1786, 0, 2.365M)  <----  Is this aggregate data for all the origin addresses?
|        (pkts,bits) in = (616.3M, 713.6G), out = (918.0M, 3.523T)
+-> SNAT TRANSLATION ADDRESS 192.107.98.17
    |        (cur, max, limit, tot) = (0, 20, 0, 1934)
    |        (pkts,bits) in = (74679, 165.9M), out = (78907, 506.2M)

<u+200e><u+200e>

<u+200e

Under the last origin address above there are some stats

What we want to see are similiar stats for each origin address.

I am assuming the last one is a roll up of all the origin addresses above

The other mistifying piece here is that what appears to be two totals for this SNAT don't seem to match.

Apppreciate any help.

-Bill

management
monitoring

3 Replies

  • Deb_Allen_18's avatar
    Deb_Allen_18
    Historic F5 Account
    Oct 31, 2007
    Hi Bill -

     

     

    Not sure what exactly these stats are supposed to reflect, will do a little digging to see if somebody can explain it to me & get back to you on that.

     

     

    In any case, you should be able to pull the SNAT stats out of SNMP, directly or using iControl (search the iControl forum for "SNMP" and you should find some posts with more details.)

     

     

    But I'm not sure the granularity you are looking for exists there either. Are your SNATs defined for wildcard or specific origins?

     

     

    /deb
  • Bill_Morency_10's avatar
    Bill_Morency_10
    Icon for Nimbostratus rankNimbostratus
    Oct 31, 2007
    The SNAT's we have defined are for specific origins.

     

     

    Thanks for taking a look.

     

     

    -Bill
  • Deb_Allen_18's avatar
    Deb_Allen_18
    Historic F5 Account
    Nov 06, 2007
    Well, as it turns out there really is no place where the SNAT stats are broken out by origin, only by translation address via SNMP or bigpipe.

     

     

    I'd recommend a Support case to take a closer look at the subtotal / total rollups to make sure the right bits are being counted.

     

     

    /deb